#cwe-416

共收录 2235 条相关情报。

← 返回所有主题
漏洞预警2026-09-29 发布INFO

Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security...

CVE-2026-95299

Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outsid

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromiu...

CVE-2026-95298

Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitr

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium secu...

CVE-2026-95282

Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code i

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chr...

CVE-2026-95277

Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitra

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP layer owns the packet ...

CVE-2026-102760

When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has b

历史摘要 · 未重新核验 · NVD

安全公告2026-09-29 发布INFO

CVE-2026-102760

CVE-2026-102760

When NetX Secure is built with `NX_SECURE_KEY_CLEAR`, every TLS record sent on an active session is wiped after it has b

历史摘要 · 未重新核验 · OSV.dev

漏洞预警2026-09-29 发布INFO

Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension data to be freed while another thread is still using it. ...

CVE-2026-84783

Issue summary: The first concurrent use of the same X.509 certificate by several threads may cause its cached extension

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

PyPy before versions 3.11.16 and 3.12.14 contains a use-after-free vulnerability in the pyexpat module's ExternalEntityParserCreate function that allows attackers to corrupt mem...

CVE-2026-76875

PyPy before versions 3.11.16 and 3.12.14 contains a use-after-free vulnerability in the pyexpat module's ExternalEntityP

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Firefox ESR 115.42, and Firefox ESR 140.17.

CVE-2026-100832

Use-after-free in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox ESR 153.4, Firefox ESR 115.4

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

CVE-2026-100831

Use-after-free in the DOM: UI Events & Focus Handling component. This vulnerability was fixed in Firefox ESR 153.4 and F

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

CVE-2026-100825

Use-after-free in the JavaScript Engine: JIT component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 15

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

CVE-2026-100818

Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox ESR 153.4, Fi

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

CVE-2026-100815

Use-after-free in the CSS Parsing and Computation component. This vulnerability was fixed in Firefox ESR 153.4 and Firef

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, and Firefox ESR 140.17.

CVE-2026-100811

Sandbox escape due to use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 157.

CVE-2026-100805

Race condition, use-after-free in the Audio/Video component. This vulnerability was fixed in Firefox 157.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157.

CVE-2026-100804

Sandbox escape due to use-after-free in the Preferences: Backend component. This vulnerability was fixed in Firefox 157.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157.

CVE-2026-100800

Sandbox escape due to use-after-free in the Disability Access APIs component. This vulnerability was fixed in Firefox ES

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ...

CVE-2026-100797

Privilege escalation due to use-after-free in the Graphics: WebRender component. This vulnerability was fixed in Firefox

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 157.

CVE-2026-100796

Use-after-free in the JavaScript: WebAssembly component. This vulnerability was fixed in Firefox 157.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-29 发布INFO

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.

CVE-2026-100791

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox ESR 153.4, Firefox 157, Firefo

历史摘要 · 未重新核验 · NVD